Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Purview | Insider Risk Management: New scenario-based policy templates

From Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.

Rollout

Roadmap
409966

Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".

Schedule dates changed in the text

Date phrases in schedule sentences differ between the versions we saw
  • Seen 3 Apr 2025 late March 2025 → early April 2025
  • Seen 21 Feb 2025 early February 2025 → late February 2025

Read from date phrases in Microsoft's text, not from notice metadata. A changed phrase can be a moved rollout, a new milestone or just rewording; "What changed" below shows which.

What the notice says

Microsoft’s text, safely structured

Updated April 3, 2025: We have updated the rollout timeline below. Thank you for your patience.

Coming soon to Microsoft Purview | Insider Risk Management: Two new preconfigured quick policy templates for Crown jewel protection and Email exfiltration. These templates are for admins who want to deploy scenario-specific policy templates with less configuration, to get started faster. The existing quick policies for Data leak and Data theft will continue to be available. You can find all four scenario-based quick policies in Insider Risk Management at Policies > Create Policies. Admins can expect additional turning after deploying these policies to meet individual alert volume needs.

This message is associated with Microsoft 365 Roadmap ID 409966.

When this will happen

Public Preview: We will begin rolling out late November 2024 and expect to complete by mid-December 2024.

General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out late February 2025 (previously early February) and expect to complete by early April 2025 (previously late March).

How this will affect your organization

  1. Sign in to Insider Risk Management with the admin role permissions
  2. Go to the Policies page at https://purview.microsoft.com/insiderriskmgmt/policiespage
  3. Select Create policy
  4. Select Quick policies
  5. Select either the Crown jewel protection policy or the Email exfiltration policy
  6. Configure policy as applicable (add users to scope, optional priority content, and so on)

The new policies will be on by default.

What you need to do to prepare

This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your users about this change and update any relevant documentation.

Learn more: The Quick Policies section in Create and manage insider risk management policies | Microsoft Learn

What changed

Between archive captures, newest first
  1. Updated February 21,April 3, 2025: We have updated the rollout timeline below. Thank you for your … out late February 2025 (previously early February) and expect to complete by early April 2025 (previously late March 2025.March). How this will affect your organization: Sign in to Insider Risk Management …

    • Tags New feature, User impact, Admin impact → Updated message, New feature, User impact, Admin impact

    Updated February 21, 2025: We have updated the rollout timeline below. Thank you for your patience. Coming soon to Microsoft Purview | Insider Risk Management: Two new preconfigured … General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out earlylate February 2025 (previously early February) and expect to complete by late March 2025. How this will affect …

  2. · first version seen

Learn more

Links from the notice and their documentation checks

No related announcements were found in the saved public history. Check the source for newer announcements.

Not confirmed here

What this page cannot tell you
  • Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
  • 1 linked page has not been read yet.
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 15 Nov 23:13 UTC · 274 of 275 readable · 250 fully read · 18 waiting for GitHub's hourly limit · documentation 461/469 current